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Abstract 

For a prime p, we consider Kloosterman sums 

K p (a) = ^2 exp(2-7ri(x + ax~ 1 )/p), a G ¥*, 

xew* 

over a finite field of p elements. It is well known that due to results of 
Deligne, Katz and Sarnak, the distribution of the sums K p (a) when a 
runs through F* is in accordance with the Sato-Tate conjecture. Here 
we show that the same holds where a runs through the sums a = u + v 
for u G U, v G V for any two sufficiently large sets U, V C F*. 

We also improve a recent bound on the nonlinearity of a Boolean 
function associated with the sequence of signs of Kloosterman sums. 



1 Introduction 

For a prime p we use ¥ p to denote the finite field of p elements. 
For a G F* we consider the Kloosterman sum 



K p (a) = yj e p (x + ax 1 ), 



zgFi 



I 



where 

e p (z) = exp(2niz / p) 

(we identify ¥ p with the set {0, 1, ... ,p — 1}). Since for the complex conju- 
gated sum we have 



K p {a) = e p (— x — ax x ) = K p (a) 



x£F* p 



the values of K p (a) are real. 

Accordingly to the Weil bound, see [T5] . 

\K p {a)\^2^/p, aeW;. 

Therefore, we can define the angles ip p (a) by the relations 

K p (a) = 2 y/p cos ipp(a) and ^ 4> P (a) ^ tt. 

The famous Sato-Tate conjecture asserts that for any fixed non-zero in- 
teger a, when p varies, the angles ip p (a) are distributed accordingly to the 
Sato-Tate density 

2 [P 2 
li ST (a,(3) = - sin 7</7, 

see P El HI El El CD 1121 13 CHI CZl EE] for various modifications and gener- 
alisations of this conjecture and further references. 

It is also known that when a sufficiently large prime p is fixed and a runs 
through F*, then, as has been shown by Katz [TT|. Chapter 13], the work 
of Deligne on the Weil conjecture implies that the distribution of the sums 
K p (a) is in accordance with the Sato-Tate density, see also ^2]- Furthermore, 
a quantitative form of this result is given by Niederreiter |18j . Namely, if 
A p (a, (3) is the set of a G F* with a ^ Vv( a ) ^ /3 then by the main result of 
Niederreiter ^H], we have: 

3/4 



max \#Ap(a,p) -^ ST {a,(3)p\ <p 3/4 . (1) 

Combining results of Fouvry, Michel, Rivat and Sarkozy (HI Lemma 2.3] 
(with r = 1) and of Niederreiter [T%1 Lemma 3] one can show that elements 
of A p (a,j3) are uniformly distributed, in the following sense. For any A G F* 
and integer M with 1 ^ M ^ p — lwe put 

A P (X, M; a, P) = {a E A p (a, (3) : Aa G [1, M]}. 
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Then for 1 ^ M ^ p — 1, the following bound holds: 

M; a, (3) - /3)M| « M^V^logp) 1 / 2 . (2) 



max max 



Fouvry, Michel, Rivat and Sarkozy [9 J also remark that combining a result 
of Fouvry and Michel [7j with the technique of Vaaler [201 one can show that 



max |#Qp(a, (3) - Hsr(ct, (3)p\ < p 3/4 

where 

Qp(a,0) = {a G W p : a 2 G „4 p (a,/3)}. 

The same bound can also be immediately obtained if one applies the result 
of Niederreiter [T%1 Lemma 3] to the bound of Michel ^3 Corollary 2.4] (see 
also Lemma 2.1]). 

Here we show that the same type of distribution is preserved when a runs 
through the sums a = u + v where u EU, v G V for any two sufficiently large 
sets W,VC F*. Namely, for any two sets W,VC F*, we put 

W p (W,V;a,/3) = {(u,v) G U x V : u + v G A p (a, (3)}. 

In particular, we obtain an asymptotic formula for #W P (W, V; a, (3) which is 
nontrivial whenever 

#W#V > p 3/2+£ (3) 

for any fixed e > and sufficiently large p. 

Then, we also improve the upper bound of JH] on the nonlinearity of the 
Boolean function associated with the sequence of signs of Kloosterman sums, 
that is for the function 

f(a) = (°' if^(«)>0ora = 0, , 

/w \ 1, if if(a) <0, U ' ' 1 j 

where n is defined by the inequalities 

2™ s= p < 2 n+1 . 

We denote by 23 n the n-dimensional Boolean cube <B n = {0, l} n and in a 
natural way identify its elements with the integers in the range ^ a ^ 2™ — 1 
(and thus with a subset of F p ). 
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We define the Fourier coefficients of f(a) as 



/(r) = 2- l ^(-lpW, r G QS n , 

aG2S„ 

where (a, r) denote the inner product of a,r G 23 n . Furthermore, we recall 
that 

N(f) = 2 n ~ l - T~ x max f(r) 

is called the nonlinearity of / and is an important cryptographic character- 
istic, for example, see 0. In particular, it is the smallest possible Hamming 
distance between the vector of values of / and the vector of values of a linear 
function in n variables over the F 2 . 

Several results about some measures of pseudorandomess of the sequence 
of signs of Kloosterman sums have recently been obtained by Fouvry, Michel, 
Rivat and Sarkozy [§]. Motivated by (and actually using) the results of 0, 
the bound 

N(f) = 2 n - 1 (l + 0(2-"/ 2 V/ 12 )). 

has been obtained in [T^j. Here we again use some results of [§], but in a 
slightly different way and improve this bound. 



2 Distribution of Elements of A p (a, (3) 

For a sequence of N real numbers 7i,...,7at G [0,1) the discrepancy is 
defined by 

|T( 7j JV) 



D = max 



-7 



iV 

where T(7, N) is the number of n ^ iV such that 7„ ^ 7. 

We also recall our agreements that the elements of F p have canonical 
representation as integers of the interval [0,p— 1]. Thus for any field element 
c G F p we interpret c/p as a rational number in the interval [0, 1]. Hence, for 
A G F* we can define the discrepancy D p (\; a, (3) of the sequence 

— , a G A„(a, (3). 
p 

Then the bound (J2J) implies that 

max max max |#A,(A, M: a, 8) - u(a, 8)M\ < p 3/4 (logp) 1/2 
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which can be reformulated in the following form: 
Lemma 1. We have, 

max max DJX: a, 3) <C p _1 / 4 (logp) 1//2 . 

AgF* 0^a</3<7r Fy 

Our main tool is a bound of exponential sums with elements of A p (a, 3). 
For A e ¥* we define 

S p (\;a,3)= e p (Aa). 

a£.4p(a,/3) 



Lemma 2. VKe /lave, 

max max \SJ\; a, /3) I < » 3/4 (logp) 1/2 . 

Proof. We recall that for any real smooth function F( 7 ) defined on the in- 
terval [0, 1] and any sequence of N real numbers ji, ■ ■ ■ ,Jn £ [0, 1] of dis- 
crepancy D, we have 

1 - Z" 1 

-^F( 7n )= / F(7)d7 + 0(L>max|F'( 7 )|), 
see Chapter 2, Theorem 5.4]. Writing 

S p (\;a,3)= cos ( 2ir — J +i sin f 27r— J 

and applying Lemma HJ we obtain the desired bound. □ 

3 Sato— Tate Conjecture for Sum Sets 

Theorem 3. For any two sets 14, V C F* ; we have 

max \#W p (U,V;a,P) - ii ST (a, P)#U#V\ < V#^#Vp 3 // 4 (logp) 1 / 2 . 
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Proof. Using the identity 



1 r\ ^ f 1 if c = 0, 



agf„ 



if c e F, 



(5) 



we write 



#W p (ZY,V;e*,/3) = ^£ ]T - £ e p (A( M + v - a) 

ueu vev aeA v {a,p) ^ xe¥ p 



«ew «ev ae^p(a,,9) agf p 
1 

P 

Separating the term #A p (a, /3)#U#V /p corresponding to A = 0, we derive 
#W p {U,V;a,/3) = + O (R) , (6) 

where 

i2 = 

V 



R=-Y^\S p (-X;a,f3)\ 



AgF; 



ueu 



vev 



Using Lemma El and the the Cauchy inequality, we obtain 



agf; 



p- 1/4 (log P ) 1/2 £ 



■ugV 

2\ V2 



uGW 



E 

agf; 



vev 



1/2 



Furthermore, by (0) we see that 



E 

agf; 



E e pM 



mGW 



<E 

AgFj, 



ueu 



Similarly, 



E 

agf; 



AgF„ u\,U2eU 



l»GV 



Collecting the above estimates together, we obtain 

R ^ v/#z7#Vp 3/4 (logp) 1/2 

which after substitution in (jUJ) and using (JTJ) leads us to the bound 

|#W P (W, V; a, (3) - /i 5T (a, /5)#W#V| 

< #W#Vp- 1/4 + ^f#U#Vp V \\ogp) 1 l 2 . 

It remains to note that 



thus the first term never dominates. □ 

Clearly the asymptotic formula of Theorem |3] is nontrivial under the con- 
dition Q. 



4 Nonlinearity 

Theorem 4. For the nonlinearity N(f) of the Boolean function f{h), given 
by (HJ), we have 

N(f) = 2™" 1 (1 + (2-"/ 16 ™ 1 / 8 )) . 

Proof. We estimate the Fourier coefficients f(k) of / by using the result that 
for any integers M, h\, h 2 with ^ M ^ M + c\ < M + c 2 < 2 n we have 

M-l 

^(-l)/(H C1 )+/(Hc 2 ) <M 2/3 p l/6 (logp) l/3 +p l/2 l0gp; 
6=0 

which is a combination of |H Lemma 2.3] with a special case r = 2 of 
Lemma 4.4]. In fact, the above bound can be simplified as 

M-l 

^(_ 1 )/(6+ci)+/(6+c 2 ) <<; M^V^logp) 1 / 3 (7) 
6=0 

(since for M p 1 / 2 logp the bound (J7j) is trivial and for M > p^logp we 
also have M 2 / 3 p 1 / 6 (logp) 1 / 3 > p^ 2 \ogp). 
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We now fix some m ^ n and write a, r e Q3 n as 

a = 6 + 2 m c and r = s + 2 m t, 
with ^ 6, s < 2 m and ^ c, t < 2 n_m . In particular 

(a,r) = (6,s) + (c,t). 

Therefore, 



|/(r)| = \f(s + 2 m t)\ 



2 m -l 2 n ~ m -l 



2 "" E E (-!) /(6 



■+2 m c)+(&,s)+(c,t) 



2 m -l 



2 -„ ^ 



6=0 



2^1— m ^ 



E (-!) /(6 



6=0 c=0 

+2 m c)+(c,t) 



c=0 



By the Cauchy inequality, we obtain 



2 m -l 



|/(r)| 2 < 2 m ~ 2n Yl 



6=0 



(_l)/(6+2 m c)+<c,i 



i=0 



'2 m — 1 2 ri— m 1 



6=0 ci,c 2 =0 



< 2 



2 m-2n ^_ 1 ^/(6+2 m c 1 )+/(6+2 m c 2 )+(c 1 ,t> + ( C2 ,t> 

2=0 
;m_ 1 

y2 (_i)/c , +2 mc i)+/( 6 + 2mc 2) 



m—2n 



E 

ci,c 2 =0 



6=0 



For 2 n m choices of ci = C2 the sums over b is equal to 2 m . For the other 
choices of c\ and C2 we can use the bound (J7J), getting 

|J^(V)| 2 = O ^2 m ~ 2n ^2 n ~ m 2 m + 2 2 ^ n ~ m ^2 2m ^2 n ^Ti 1 ^) ) 
= O (2 m ~ n + 2 n ^ 6 ~ m/,3 n 1//3 ) 

We now define m by the inequalities 2 m ^ 2 7n//8 n 1 / 4 < 2 m+1 , and after simple 
calculations conclude the proof. □ 



8 



5 Comments 



It seems very plausible that fT7\ Corollary 2.4] can be used to derive a non- 
trivial estimate for sums 

with a nonprincipal multiplicative character \ °f ^p- 111 this case one can 
obtain a multiplicative analogue of our results and study the set 

Z P (U, V;ct,P) = {(u,v) E U x V : uv E A p {a, (3)}. 

Multidimensional analogues of our results which involve joint distributions 
of Kloosterman sums can be obtained as well. 

Also, as curiosity, we mention that Theorem El can be combined with the 
technique of [21 El H] to study sets of elements of Beatty sequence [dm + p\ 
(where "d > and p are real) which belong to A p (a,[3), that is, sets of the 
form 

£> p (f9, p, M; a, (3) = {m E [1, M] : [dm + p\ E A p (a, /?)}. 
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